Author: James Page
Revision Date: 2015-10-08 06:16:59 UTC

* New upstream release for OpenStack Liberty.
* d/control,python-swift.postinst: Tidy lintian warning messages.

Author: James Page
Revision Date: 2015-10-08 06:16:59 UTC

* New upstream release for OpenStack Liberty.
* d/control,python-swift.postinst: Tidy lintian warning messages.

Author: Jamie Strandboge
Revision Date: 2015-07-30 12:24:47 UTC

[ Marc Deslauriers ]
* SECURITY UPDATE: object deletion via x-versions-location container
  - debian/patches/CVE-2015-1856.patch: prevent unauthorized delete in
    swift/proxy/controllers/obj.py, added tests to
    test/functional/tests.py.
  - CVE-2015-1856

[ Jamie Strandboge ]
* debian/patches/x-auth-token-should-be-bytestring.patch: update for
  functional test suite
* debian/patches/fix-tempauth-acl-checks.patch: fix tempauth acl checks when
  simplejson has no speedups
* debian/patches/increase-httplib-maxheaders.patch: fix testuite and
  increase httplib._MAXHEADERS

Author: Jamie Strandboge
Revision Date: 2015-07-30 12:24:47 UTC

[ Marc Deslauriers ]
* SECURITY UPDATE: object deletion via x-versions-location container
  - debian/patches/CVE-2015-1856.patch: prevent unauthorized delete in
    swift/proxy/controllers/obj.py, added tests to
    test/functional/tests.py.
  - CVE-2015-1856

[ Jamie Strandboge ]
* debian/patches/x-auth-token-should-be-bytestring.patch: update for
  functional test suite
* debian/patches/fix-tempauth-acl-checks.patch: fix tempauth acl checks when
  simplejson has no speedups
* debian/patches/increase-httplib-maxheaders.patch: fix testuite and
  increase httplib._MAXHEADERS

Author: Jamie Strandboge
Revision Date: 2015-07-27 10:48:47 UTC

[ Marc Deslauriers ]
* SECURITY UPDATE: metadata constraint bypass via multiple requests
  - debian/patches/CVE-2014-7960.patch: add metadata checks to
    swift/account/server.py, swift/common/constraints.py,
    swift/common/db.py, swift/container/server.py, added tests to
    test/unit/common/test_db.py,
    test/functionalnosetests/test_account.py,
    test/functionalnosetests/test_container.py.
  - CVE-2014-7960

[ Jamie Strandboge ]
* debian/patches/CVE-2014-7960.patch:
  - adjust unittests since we use webob.exc and not the newer swob
  - adjust functional tests to properly skip if test environment is not
    specified and to not interfere with other functional tests
* debian/control: Build-Depends on python-mock

Author: Jamie Strandboge
Revision Date: 2015-07-27 10:48:47 UTC

[ Marc Deslauriers ]
* SECURITY UPDATE: metadata constraint bypass via multiple requests
  - debian/patches/CVE-2014-7960.patch: add metadata checks to
    swift/account/server.py, swift/common/constraints.py,
    swift/common/db.py, swift/container/server.py, added tests to
    test/unit/common/test_db.py,
    test/functionalnosetests/test_account.py,
    test/functionalnosetests/test_container.py.
  - CVE-2014-7960

[ Jamie Strandboge ]
* debian/patches/CVE-2014-7960.patch:
  - adjust unittests since we use webob.exc and not the newer swob
  - adjust functional tests to properly skip if test environment is not
    specified and to not interfere with other functional tests
* debian/control: Build-Depends on python-mock

Author: Marc Deslauriers
Revision Date: 2015-07-22 11:03:05 UTC

* SECURITY UPDATE: metadata constraint bypass via multiple requests
  - debian/patches/CVE-2014-7960.patch: add metadata checks to
    swift/account/server.py, swift/common/constraints.py,
    swift/common/db.py, swift/container/server.py, added tests to
    test/functional/test_account.py, test/functional/test_container.py,
    test/unit/common/test_db.py.
  - CVE-2014-7960
* SECURITY UPDATE: object deletion via x-versions-location container
  - debian/patches/CVE-2015-1856.patch: prevent unauthorized delete in
    swift/proxy/controllers/obj.py, added tests to
    test/functional/tests.py, test/unit/proxy/test_server.py.
  - CVE-2015-1856

Author: Marc Deslauriers
Revision Date: 2015-07-22 11:03:05 UTC

* SECURITY UPDATE: metadata constraint bypass via multiple requests
  - debian/patches/CVE-2014-7960.patch: add metadata checks to
    swift/account/server.py, swift/common/constraints.py,
    swift/common/db.py, swift/container/server.py, added tests to
    test/functional/test_account.py, test/functional/test_container.py,
    test/unit/common/test_db.py.
  - CVE-2014-7960
* SECURITY UPDATE: object deletion via x-versions-location container
  - debian/patches/CVE-2015-1856.patch: prevent unauthorized delete in
    swift/proxy/controllers/obj.py, added tests to
    test/functional/tests.py, test/unit/proxy/test_server.py.
  - CVE-2015-1856

Author: Chuck Short
Revision Date: 2015-02-09 13:40:34 UTC

* New upstream release.
* debian/patches/fixup-32bit-max-file-size.patch: Dropped no longer needed.

Author: Chuck Short
Revision Date: 2015-02-09 13:40:34 UTC

* New upstream release.
* debian/patches/fixup-32bit-max-file-size.patch: Dropped no longer needed.

Author: Chuck Short
Revision Date: 2014-10-16 15:47:13 UTC

[ Corey Bryant ]
New upstream release.

Author: Chuck Short
Revision Date: 2014-10-16 15:47:13 UTC

[ Corey Bryant ]
New upstream release.

Author: Marc Deslauriers
Revision Date: 2014-03-14 14:25:35 UTC

* SECURITY UPDATE: timing side-channel attack in TempURL
  - debian/patches/CVE-2014-0006.patch: use constant time comparison in
    swift/common/middleware/tempurl.py.
  - CVE-2014-0006

Author: Chuck Short
Revision Date: 2014-04-17 04:52:50 UTC

New upstream release (LP: #1299055).

Author: James Page
Revision Date: 2014-04-14 11:03:23 UTC

[ Chuck Short ]
* New upstream release candidate (LP: #1299055).

[ James Page ]
* d/control: Add appropriate Breaks/Replaces to support move of man pages
  between binary packages in 1.13.1~rc1-0ubuntu1 (LP: #1306241).

Author: Marc Deslauriers
Revision Date: 2014-03-14 14:27:42 UTC

* SECURITY UPDATE: timing side-channel attack in TempURL
  - debian/patches/CVE-2014-0006.patch: use constant time comparison in
    swift/common/middleware/tempurl.py.
  - CVE-2014-0006

Author: Marc Deslauriers
Revision Date: 2014-03-14 14:27:42 UTC

* SECURITY UPDATE: timing side-channel attack in TempURL
  - debian/patches/CVE-2014-0006.patch: use constant time comparison in
    swift/common/middleware/tempurl.py.
  - CVE-2014-0006

Author: Marc Deslauriers
Revision Date: 2014-03-14 14:25:35 UTC

* SECURITY UPDATE: timing side-channel attack in TempURL
  - debian/patches/CVE-2014-0006.patch: use constant time comparison in
    swift/common/middleware/tempurl.py.
  - CVE-2014-0006

Author: Jamie Strandboge
Revision Date: 2013-10-22 16:09:03 UTC

* SECURITY UPDATE: Fix handling of DELETE obj reqs with old timestamp
  - debian/patches/CVE-2013-4155.patch: don't create tombstone files when
    a file with a newer timestamp exists
  - CVE-2013-4155
  - LP: #1196932

Author: Jamie Strandboge
Revision Date: 2013-10-22 16:09:03 UTC

* SECURITY UPDATE: Fix handling of DELETE obj reqs with old timestamp
  - debian/patches/CVE-2013-4155.patch: don't create tombstone files when
    a file with a newer timestamp exists
  - CVE-2013-4155
  - LP: #1196932

Author: Chuck Short
Revision Date: 2013-10-17 10:26:18 UTC

New upstream release (LP: #1236462).

Author: Chuck Short
Revision Date: 2013-10-09 15:13:23 UTC

New upstream release candidate.

Author: Chuck Short
Revision Date: 2013-04-04 10:38:18 UTC

New upstream release.

Author: Chuck Short
Revision Date: 2013-04-04 10:38:18 UTC

New upstream release.

Author: Chuck Short
Revision Date: 2012-11-26 19:28:42 UTC

* New upstream release for the Ubuntu Cloud Archive.
* New upstream release.
* debian/control: Dropped python-webob.
* debian/swift.install: Add swift-bench-client.

Author: Chuck Short
Revision Date: 2012-11-26 19:28:42 UTC

* New upstream release for the Ubuntu Cloud Archive.
* New upstream release.
* debian/control: Dropped python-webob.
* debian/swift.install: Add swift-bench-client.

Author: Chuck Short
Revision Date: 2012-10-11 09:13:09 UTC

New bug fix release for the Ubuntu Cloud Archive.

Author: Chuck Short
Revision Date: 2012-10-11 09:06:02 UTC

debian/control: Conflicts/Breaks on swift 1.6.0-ubuntu1 when upgrading
from precise, since the swift client has been moved to python-swiftclient.
(LP: #1061064)

Author: Chuck Short
Revision Date: 2012-04-12 12:05:29 UTC

debian/patches/fix-ubuntu-unittests.patch: Refreshed
to fix testsuite failures.

Author: Adam Gandelman
Revision Date: 2012-03-23 01:20:28 UTC

debian/patches/allow_testing_logfile.patch: Allow test suites
to configure a custom logfile, instead of using /dev/log. Fixes FTBFS
of other components that may use swift in middleware during test suites.
(LP: #961871)

Author: Marc Cluet
Revision Date: 2012-01-18 15:48:53 UTC

* Modified changelog to remove name tag

Author: Robie Basak
Revision Date: 2011-12-13 12:05:49 UTC

Remove swauth manpages (LP: #900888).

Author: Chuck Short
Revision Date: 2011-09-30 15:00:26 UTC

[ Adam Gandelman ]
debian/patches/backport-change-swift-ring-builder-exit-codes: Standardize
exit codes now to reduce hassles after future upgrades (LP: #836922)

Author: Adam Gandelman
Revision Date: 2011-09-29 21:50:46 UTC

Update release tag to 'UNRELEASED'

Author: Chuck Short
Revision Date: 2011-09-12 17:10:37 UTC

releasing version 1.4.3-0ubuntu1

Author: Marc Cluet
Revision Date: 2011-08-17 17:00:37 UTC

 * Added upstart scripts for all swift components
 * Modified debian/rules to install upstart scripts

Author: James Page
Revision Date: 2011-08-16 10:07:19 UTC

Added debian/python-swift.postrm: Remove swift user when purging
package (LP: #825670).

Author: Mike Barton
Revision Date: 2011-04-19 18:58:06 UTC

Remove swift-account-audit from swift-account.install

Author: Chuck Short
Revision Date: 2011-04-15 08:25:53 UTC

New upstream release.

Author: Monty Taylor
Revision Date: 2010-10-26 17:08:29 UTC

Backport to lucid.

Author: Monty Taylor
Revision Date: 2010-10-26 16:54:16 UTC

Backport to Natty.

Author: Monty Taylor
Revision Date: 2010-10-26 16:52:26 UTC

Backport to Maverick.

Author: Soren Hansen
Revision Date: 2010-09-01 11:25:31 UTC

Initial upload to Ubuntu (FFe: LP #620367).